m-tsuda.nats.tokyo

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 7c:ca:f0:c7:50:69:9a:f4:3e:f2:b1:a0 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=m-tsuda.nats.tokyo

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7c:ca:f0:c7:50:69:9a:f4:3e:f2:b1:a0
Serial Number (int): 38621481278061235767623201184
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9a:c9:9b:0b:11:61:c3:31:46:c5:74:1c:f3:0f:08:54:5f:08:b7:c2
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 63:cc:c8:a4:e7:f2:08:e8:a8:28:35:05:e8:79:98:10:26:17:60:81
Fingerprint (sha256): 5b:07:ec:bc:dd:7e:d8:32:2b:2e:3c:b0:c0:09:06:ea:9e:3d:1a:40:1f:d1:63:c4:60:11:d8:76:5f:71:06:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate m-tsuda.nats.tokyo

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m-tsuda.nats.tokyo

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m-tsuda.nats.tokyo

Other certificates including the domain name nats.tokyo

(limited to 100 certificates)
mitoyo.nats.tokyo
oohata.nats.tokyo
free-s.nats.tokyo
nihon-shosha.nats.tokyo
wajiro-seishoen.nats.tokyo
links-c.nats.tokyo
arcs.nats.tokyo
katou-t.nats.tokyo
sengikyo.nats.tokyo
wadasho.nats.tokyo
icenoie.nats.tokyo
s-and-g.nats.tokyo
furutetsu.nats.tokyo
d-paradise.nats.tokyo
mitoyo.nats.tokyo
orwak.nats.tokyo
mitoyo.nats.tokyo
f-eiken.nats.tokyo
491-footwork.nats.tokyo
green-grace.nats.tokyo
3-r2.nats.tokyo
chita-kougyo.nats.tokyo
m-tsuda.nats.tokyo
itsuki-group.nats.tokyo
usec.nats.tokyo
s-and-g.nats.tokyo
nankai-road.nats.tokyo
*.nats.tokyo
cosmokikaku.nats.tokyo
keick.nats.tokyo
toukai-s.nats.tokyo
shinada.nats.tokyo
boh-chubu.nats.tokyo
maedago.nats.tokyo
shinwa-kucyou.nats.tokyo
*.nats.tokyo
*.nats.tokyo
straight.nats.tokyo
ecoforest.nats.tokyo
rise-k.nats.tokyo
eitech-na.nats.tokyo
kyushu-ad.nats.tokyo
k-kusano.nats.tokyo
sawadatekkin.nats.tokyo
act-sp.nats.tokyo
zhiservice.nats.tokyo
e-meiden.nats.tokyo
orwak.nats.tokyo
harukarainbow.nats.tokyo
shu-concier.nats.tokyo
tk-union.nats.tokyo
tateyamakogyo.nats.tokyo
chita-kougyo.nats.tokyo
zuiki.nats.tokyo
yusho-co.nats.tokyo
maruhishi.nats.tokyo
sanpuku.nats.tokyo
hai-f.nats.tokyo
*.nats.tokyo
shintaku-h.nats.tokyo
activeplan.nats.tokyo
*.nats.tokyo
daiyu-kaitai.nats.tokyo
earth-service.nats.tokyo
harukarainbow.nats.tokyo
sawadatekkin.nats.tokyo
109sai.nats.tokyo
daiyu-kaitai.nats.tokyo
hirano-tire.nats.tokyo
yusho-co.nats.tokyo
pianoservice2.nats.tokyo
workst.nats.tokyo
usami-kenkou.nats.tokyo
umekibisou.nats.tokyo
109sai.nats.tokyo
*.nats.tokyo
q-and-s.nats.tokyo
hayashida-d-s.nats.tokyo
gp-plan.nats.tokyo
kyushu-ad.nats.tokyo
m-tsuda.nats.tokyo
nerima-okada-iin.nats.tokyo
lim-eiya.nats.tokyo
hgld.nats.tokyo
ream-t.nats.tokyo
kamakuranozomikai.nats.tokyo
daiyu-kaitai.nats.tokyo
harukarainbow.nats.tokyo
raifue-ru.nats.tokyo
i-o-m.nats.tokyo
*.nats.tokyo
utoyama.nats.tokyo
sawadatekkin.nats.tokyo
boh-chubu.nats.tokyo
kyushu-ad.nats.tokyo
orwak.nats.tokyo
nankai-road.nats.tokyo
lim-eiya.nats.tokyo
car-life.nats.tokyo
*.nats.tokyo

Certificate

The complete raw certificate details for m-tsuda.nats.tokyo in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu67CYrnhpSpHqR/ZuqsY
84f8Iz8DF1j7kxOdFWqxY/lFDRjxt8aJj9SviS8sduwbPDaNEHlxlTwwCS1fpcpC
eUbthayuJwx5gfnBq/nRvjWC3Bhtrip0UrpEBwCOYglH+4cpMIxEvTRpXdbZoV33
ka8NDdfEunnQdtxYqr8iKVfyW+mtueIi+Itz2Nmk7wrZm9BGgwCFmKsVEHKryWze
O1CbnASHS9unClQ9DcAe2MkbbhhbdOIUeGI7BKRsr06ZoAbEoM/cLfBXLwJoe2at
Qp/m+KcAlr8cfLA2tJoo4TmHAnX/CSD73m+EXQ973u8dzinzBQXy9wru8dzhgvY2
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38621481278061235767623201184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 05:33:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 05:33:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm-tsuda.nats.tokyo'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23692740060684602547137590688326491667830260592201051912063293987149284232749902394092951413140019921831442542305747810006982127751463676740247543465235550410308005152831417363047513748061566486905572147806755839038009502016349770119424109103318357827931015438652693397208293643767151186253092375679562949788551376436671824006117716400226696252975403552176178308145178216960561986767583648631481337620732740067325731459543508433053535017208617706564878204139349097754836269839116591222139195810090370082945261345143993061395882890516521139928988593576284899602134327793433785025214325723055339146491978052493989263101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-tsuda.nats.tokyo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ac99b0b1161c33146c5741cf30f08545f08b7c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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